[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Support for plain dm-crypt and detached LUKS header

From: Maxim Fomin
Subject: Re: Support for plain dm-crypt and detached LUKS header
Date: Sat, 11 Feb 2017 21:02:37 +0300

On Sat, Feb 11, 2017 at 5:29 PM, Andrei Borzenkov <address@hidden> wrote:
> 11.02.2017 17:11, Maxim Fomin пишет:
>> By the way, why user should configure the module manually? My
>> understanding is that user should provide all necessary options to the
>> command (manually or via grub.cfg) which decrypts dm-crypt partition
>> just like in case of cryptsetup.
> cryptsetup works with self-identifying containers which dm-crypt is not.

Definitely false. Have you ever worked with plain dm-crypt? Cryptsetup
 is utility to open and close
plain dm-crypt containers which are not self-identifying. User must
provide all parameters in order
to open container: password, hash, cipher, key size, data offset, IV offset.

I suspect there is misunderstanding here. What I am suggesting is to
have grub command which
works similar to cryptsetup utility. It may be the same cryptomount
command or a new one. For
example: grubcryptsetup (hd0,gptXXX) -s ... -h .... -c .... etc.

I see no technical grounds for such ideas 'manually configuration'
'special module', etc.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]